HOW BULLWALL PROTECTED AN EDUCATIONAL INSTITUTION FROM RISING RANSOMWARE THREATS

‍

OVERVIEW

With ransomware attacks on educational institutions making headlines, St. Bede’s School decided it was time to reassess its own cyber defences. By deploying BullWall’s Ransomware Containment solution, the school has strengthened its cybersecurity posture, bolstered confidence in its protective measures, and ensured continuity in learning—even in the face of potential cyber incidents. The solution even helped detect inappropriate computer use in real time.

CHALLENGES

St. Bede’s School, located in Surrey, is a unique mixed-faith Christian secondary school with 1,800 students aged 11 to 18. It’s the only state-funded school in the UK where Anglicans, Roman Catholics, and the Free Churches are formally united in an ecumenical partnership.

Like many modern schools, St. Bede’s has invested in digital learning, with a robust IT environment primarily based on Microsoft Windows. Teaching tools are largely delivered through Google Workspace, including Google Classroom and Chromebooks. During the COVID-19 pandemic, many Chromebooks were loaned to students to support remote learning.

To safeguard staff and pupils, the school has developed strong cybersecurity protocols, including AVG Antivirus Business Edition and iBoss for web filtering. Even Chromebooks used off-site remain under school-managed security policies.

However, the education sector faces distinct cybersecurity challenges—limited budgets, older equipment, small IT teams, and varying levels of digital literacy among students and staff.

IT Manager Samuel Alexander-Omoh explains, “We’d never experienced a ransomware attack, but I was hearing more and more about schools being targeted. Because so many organisations had been hit, we knew it was time to take our protection a step further. It’s the type of solution you hope you never need—but you’ll be grateful to have if the worst happens.”

Alexander-Omoh also noted the unique risk posed by students who may unknowingly bring threats into the school network, “Students aren’t as aware of cybersecurity risks. They might download a file or use cheap charging cables that can carry malware. They’d plug those into school computers without a second thought.”

The rising frequency of ransomware attacks—particularly in schools—prompted the school to act. A concerned governor raised the issue just as BullWall’s partner, Ricoh, approached the school to offer support.

SOLUTION

St. Bede’s invited BullWall and Ricoh to present their Ransomware Containment solution. A live demo was arranged, involving installation on a test server and endpoint device, which were then subjected to simulated ransomware attacks—such as rapid file changes, corruption, and zero-day encryption.

While the school considered other solutions, BullWall’s approach stood out.

“What impressed us most,” says Alexander-Omoh, “was BullWall’s ability to automatically isolate a device once ransomware activity crossed a certain threshold. That alone is a game changer—it contains the threat before it spreads.”

The solution is now deployed across the school’s entire IT estate, complementing its existing cybersecurity stack. BullWall’s Ransomware Containment continuously monitors file activity—locally and in the cloud—using heuristics to detect and respond to malicious encryption attempts in real time.

If a ransomware outbreak is detected, BullWall uses built-in scripts and integrations to isolate compromised devices automatically.

Crucially, this protection runs 24/7, ensuring incidents can be contained even outside of school hours.

After installation, the system was allowed to run in learning mode for two weeks to build a profile of normal behaviour. Weekly check-ins with Ricoh and BullWall helped ensure everything was working smoothly.

“Both Ricoh and BullWall were excellent,” adds Alexander-Omoh. “They checked in regularly, and I’m confident I can call them anytime if I need support.”

BENEFITS

Though the school has not experienced a ransomware incident, BullWall has already proven its value. The solution has flagged abnormal file activity—including one case where a student was using a classroom computer inappropriately during a lesson.

“It wasn’t a security breach, but it was something we wouldn’t have noticed otherwise—and it was flagged in real time,” says Alexander-Omoh.

BullWall analyses every file activity across the school network without placing extra strain on system performance. Each change is monitored for signs of malicious encryption or corruption and is visualised in real time via a live dashboard. In the event of an actual attack, BullWall builds a detailed recovery report and recovery list, helping IT teams to restore affected files quickly and safely.

Alexander-Omoh also highlights the broader implications of an attack:

“A ransomware event could lock us out of crucial systems and student data. For example, we wouldn’t know if a student had an allergy or needed specific care. That compromises both safety and learning. We’d likely have to shut the school until we could recover. The financial and reputational cost could be immense.”

One new teacher at the school had just come from an institution recently hit by a ransomware attack—it took two months to return to normal operations.

CONCLUSION

With BullWall Ransomware Containment in place, St. Bede’s has enhanced its last line of defence against cyber threats, gaining peace of mind and greater visibility into its IT environment.

“Given the growing threat and the number of schools being targeted,” says Alexander-Omoh, “BullWall’s solution is absolutely critical for us. It allows us to focus on what matters most—providing a safe, secure learning environment and quality education for our students.”